Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: 255lJ0lS4meDNIdWmbrzI6H2hoZIxeOJgrcvHnqwTCo=
Subject key identifier: 59:56:19:5E:46:D1:78:D2:B7:F0:2F:53:B6:C8:AD:F1:F1:F5:70:A5
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 01A000CA2A6CC8A5C9006DFB92DDB6E93DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 1A20
Signing time: Fri 14 Aug 2026 15:00:44 +0000
Manifest this update: Fri 14 Aug 2026 15:00:44 +0000
Manifest next update: Sat 15 Aug 2026 15:00:44 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: zvLXqgyVkqUaZXkSps4W11AVeLirDOHyyDuGR1YyhAw=)
2: IMNGeAH2RRBE8orK0TLke0HPxKQ.roa (hash: e4rxqBMgfnAkGyLI8Cggr5KhboGpBtVTFvPT4BNFaIw=)
3: oRUzmPVMVYzpNrzGxH1BooLT378.roa (hash: uCcKGYmN/9GuwRuNNCgcYsC9Ba96kMPVmQDqSWP2004=)
4: w4CVyL2U79HSB7wONrXYugmX-AM.roa (hash: yBF78znISqvhJ/sR7b39y1Qr+HsHjN0eWMU8QBarpaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:2a:6c:c8:a5:c9:00:6d:fb:92:dd:b6:e9:3d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Aug 14 15:00:44 2026 GMT
Not After : Aug 15 15:00:44 2026 GMT
Subject: CN=5956195e46d178d2b7f02f53b6c8adf1f1f570a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:11:83:27:54:64:13:cb:22:76:cb:24:c5:
3e:99:df:f5:86:52:37:e4:be:dc:aa:cb:e6:73:bf:
04:ce:f4:e6:4a:33:ab:be:73:28:a6:d5:79:1c:e9:
c9:72:1b:04:68:ba:d7:b9:e5:04:4f:3e:b6:18:a6:
dc:5e:d6:c0:d6:63:87:d6:80:3b:d8:d1:fc:a6:52:
40:e8:c6:fb:71:eb:b3:00:c9:98:21:8a:5e:5a:04:
b9:6b:4c:34:65:0a:a0:b4:d3:8b:65:71:bc:20:ee:
b0:a7:f9:e7:57:5d:26:a3:ea:55:fa:fe:08:69:3f:
d9:96:e6:44:f8:e8:90:78:4a:47:34:de:47:ea:3a:
8f:f3:6d:11:55:5e:37:13:b3:04:05:89:c3:cc:6b:
00:a4:25:fd:8c:5a:dd:70:d9:c8:3a:0e:a7:aa:fd:
a1:4d:dc:6e:13:b8:a5:b4:44:62:d7:65:9e:d4:64:
c0:99:ca:7e:42:71:cd:43:64:ef:bd:f8:d0:33:5a:
8d:10:07:75:9c:bb:0e:b3:18:df:f8:b7:f3:88:45:
f6:31:f8:f0:8d:bd:53:6b:99:3c:61:c7:60:71:bc:
2e:e0:4e:6c:8f:25:52:cf:c7:3c:9d:e4:eb:02:60:
e6:36:84:58:9b:90:68:62:6d:a3:d1:c8:e4:f3:03:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:56:19:5E:46:D1:78:D2:B7:F0:2F:53:B6:C8:AD:F1:F1:F5:70:A5
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:0f:a0:f5:3f:af:19:97:dd:98:28:56:19:84:17:fd:c5:
51:23:b7:45:b0:13:2c:7f:37:2c:90:b6:85:a1:20:d7:9c:eb:
d5:42:73:dc:6f:e8:f7:e5:a9:f6:c5:6c:af:f7:09:be:d4:e7:
2b:c2:fa:48:24:94:9b:69:6f:5b:a9:1f:e2:60:74:f9:ca:57:
44:68:06:05:ab:9b:25:ee:fd:b5:6a:34:59:8e:de:5d:81:ad:
90:38:da:5a:1a:a0:4a:eb:db:f7:f3:cb:1e:9e:8c:71:f8:c4:
48:3d:ef:2d:8a:2f:c6:2c:9a:65:36:54:a9:03:96:25:e0:20:
9c:8e:12:d0:54:29:43:6a:b1:b8:8a:90:d3:dc:2f:86:cc:c3:
78:24:48:74:65:67:90:56:1f:ef:08:26:ae:9c:8c:cd:2e:59:
23:ba:b7:54:aa:ed:e8:24:9b:62:8b:8a:56:7e:4f:8d:f1:e7:
a3:3f:a4:12:eb:0f:8c:82:c3:4f:8c:f4:31:a4:09:7d:31:fa:
c8:a6:1f:87:fa:c8:b3:7f:bd:e5:38:8e:6d:c5:af:63:77:d3:
7a:38:93:ce:bb:d5:c2:ab:41:5f:3d:2e:f0:a2:22:f7:db:b6:
f6:01:1a:54:b4:a1:13:2e:3a:3c:87:52:8f:2c:1a:2f:be:1a:
6e:34:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:07 2026 by rpki-client